CVE-2018-17792

MDaemon Webmail (formerly WorldClient) has CSRF.
Source: NIST
CVE-2018-17792